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III, Listing of Claims 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

1 . (Previously Presented) A system for traversing a network address translation/firewall device, 
having a public side and a private side, with network traffic, the network traffic passing between 
a device on the private side and a device on the public side; the system comprising: 

a network processing system on the public side of the network address 
translation/firewall device, the network processing system operable to anchor network traffic to 
and from the private side of the network address translation/firewall device; and 

a traversal client on the private side of the network address translation/firewall device 
having a secure connection with the network processing system, wherein the traversal client is 
operable to pass packets through the network address translation/firewall device in order to 
create allocations in the network address translation/firewall device to allow the network traffic 
to pass between the private side device and the public side device, and wherein the traversal 
client does not reside in the path of the traffic between the private side device and the public side 
device. 

2. (Original) The system of claim 1 wherein the anchoring by the network processing system is 
accomplished by substituting the address associated with the private side device with an address 
assigned to the network processing system. 

3. (Original) The system of claim 1 wherein the packets sent by the traversal client through the 
network address translation/firewall to create allocations in the network address 
translation/firewall device are formed in the network processing system and sent to the traversal 
client over the secure connection. 

4. (Original) The system of claim 1 wherein the network traffic is a voice-over-Internet 
Protocol session. 
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5. (Previously Presented) The system of claim 4 wherein the voice-over-Internet Protocol 
session uses SIP messaging. 

6. (Original) The system of claim 4 wherein the voice-over-Internet-Protocol session includes 
signaling traffic separate from the bearer traffic, and wherein the signaling traffic from the public 
side device is transmitted to the private side device using the traversal client and the secure 
connection. 

7. (Original) The system of claim 4 wherein the private side device must register with a 
registrar on the public side of the network address translation/firewall device in order to receive 
voice-over-Internet-Protocol calls. 

8. (Original) A method for traversing a network address translation/firewall device, having a 
public side and a private side, with bidirectional network traffic, the bidirectional network traffic 
passing between a device on the private side and a device on the public side; the system 
comprising: 

receiving packets at a network processing system, the network processing system on the 
public side of the network address translation/firewall device; 

passing control information bound for the private side device through a traversal client, 
the traversal client having a secure connection with the network processing system; 

creating allocations in the network address translation/firewall device to allow the 
bidirectional network traffic through the network address translation/firewall device, the 
allocations created by sending a test packet from the traversal client to the network processing 
system through the network address translation/firewall device, wherein the traversal client does 
not reside in the path of the traffic between the private side device and the public side device. 

9. (Original) The method of claim 8 further comprising the step of anchoring the network traffic 
to and from the private side of the network address translation/firewall device using the network 
processing system. 
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10. (Original) The method of claim 9 wherein the step of anchoring is accomplished by 
substituting the address associated with the private side device with an address assigned to the 
network processing system. 

1 1 . (Original) The method of claim 8 wherein the test packet sent by the traversal client through 
the network address translation/firewall to create allocations in the network address 
translation/firewall device are formed in the network processing system and sent to the traversal 
client over the secure connection. 

12. (Original) The method of claim 8 wherein the traffic is a voice-over-Internet Protocol 
session. 

13. (Previously Presented) The method of claim 12 wherein the voice-over-Internet Protocol 
session uses SIP messaging. 

14. (Previously Presented) The method of claim 13 wherein the voice-over-Internet-Protocol 
session includes signaling traffic separate from the bearer traffic, and wherein the signaling 
traffic from the public side device is transmitted to the private side device using the traversal 
client and the secure connection. 

15. (Previously Presented) The method of claim 12 wherein the private side device must 
register with a registrar on the public side of the network address translation/firewall device in 
order to receive voice-over-Internet-Protocol calls. 
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